clear passwd, for safety

diff --git a/libexec/ftpd/ftpcmd.y b/libexec/ftpd/ftpcmd.y
index f26db5b..276fb93 100644 (file)
--- a/libexec/ftpd/ftpcmd.y
+++ b/libexec/ftpd/ftpcmd.y
@@ -152,6 +152,7 @@ cmd
        | PASS SP password CRLF
                {
                        pass($3);
+                       memset($3, 0, strlen($3));
                        free($3);
                }
        | PORT SP host_port CRLF

diff --git a/libexec/ftpd/ftpd.c b/libexec/ftpd/ftpd.c
index 6ca18fd..e659f7f 100644 (file)
--- a/libexec/ftpd/ftpd.c
+++ b/libexec/ftpd/ftpd.c
@@ -1,4 +1,4 @@
-/*     $OpenBSD: ftpd.c,v 1.17 1996/08/27 10:08:37 deraadt Exp $       */
+/*     $OpenBSD: ftpd.c,v 1.18 1996/09/04 14:41:29 deraadt Exp $       */
 /*     $NetBSD: ftpd.c,v 1.15 1995/06/03 22:46:47 mycroft Exp $        */
 
 /*
@@ -1555,7 +1555,7 @@ yyerror(s)
 
        if (cp = strchr(cbuf,'\n'))
                *cp = '\0';
-       reply(500, "'%s': command not understood.", cbuf);
+       reply(500, "'%s': command not understood: %s.", cbuf, s);
 }
 
 void